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CLAIMS 

What is claimed is: 

1 . A method comprising: 

determining at least one Squared Tate pairing for at least one hyperelliptic 
curve; and 

cryptographically processing selected information based on said determined 
Squared Tate pairing. 

2. The method as recited in Claim 1, wherein said Squared Tate pairing 
is defined for at least one hyperelliptic curve C of genus g over a field K. 

3. The method as recited in Claim 1, wherein determining said Squared 
Tate pairing further includes: 

forming a mathematical chain for ra, wherein m is a. positive integer and an 
m-torsion element D is fixed on Jacobian of said hyperelliptic curve C. 

4. The method as recited in Claim 3, wherein said mathematical chain 
includes a mathematical chain selected from a group of mathematical chains 
comprising an addition chain and an addition-subtraction chain. 
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5. A computer-readable medium having computer-implementable 
instructions for causing at least one processing unit to perform acts comprising: 

calculating at least one Squared Tate pairing for at least one hyperelliptic 
curve; and 

cryptographically processing selected information based on said determined 
Squared Tate pairing. 

6. The computer-readable medium as recited in Claim 5, wherein said 
Squared Tate pairing is defined for at least one hyperelliptic curve C of genus g 
over a field K. 

7. The computer-readable medium as recited in Claim 5, wherein 
determining said Squared Tate pairing further includes: 

forming a mathematical chain for m, wherein m is a positive integer and an 
m-torsion element D is fixed on Jacobian of said hyperelliptic curve C. 

8. The computer-readable medium as recited in Claim 7, wherein said 
mathematical chain includes a mathematical chain selected from a group of 
mathematical chains comprising an addition chain and an addition-subtraction 
chain. 
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9. An apparatus comprising: 

memory configured to store information suitable for use with using a 
cryptographic process; 

logic operatively coupled to said memory and configured to calculate at 
least one Squared Tate pairing for at least one hyperelliptic curve, and at least 
partially support cryptographic processing of selected stored information based on 
said determined Squared Tate pairing. 

10. The apparatus as recited in Claim 9, wherein said Squared Tate 
pairing is defined for at least one hyperelliptic curve C of genus g over a field K. 

11. The apparatus as recited in Claim 9, wherein said logic is further 
configured to form a mathematical chain for m, wherein m is a positive integer and 
an m-torsion element D is fixed on Jacobian of said hyperelliptic curve C. 

12. The apparatus as recited in Claim 11, wherein said mathematical 
chain includes a mathematical chain selected from a group of mathematical chains 
comprising an addition chain and an addition-subtraction chain. 
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13. A method comprising: 

determining a hyperelliptic curve C of genus g over a field K and a positive 
integer m; 

determining a Jacobian J(Q of said hyperelliptic curve C, and wherein each 
element D of J(Q contains a representative of the form A- g(Po), where A is an 
effective divisor of degree g; and 

determining a plurality of functions h J D that are iterative building blocks for 
the formation of a function h m D in order to evaluate v m which is a Squared Tate 
pairing. 

14. The method as recited in Claim 13, wherein said hyperelliptic curve 
C is over a field not of characteristic 2. 

15. The method as recited in Claim 13, wherein 

for at least one element D of «/(C), a representative for iD will be A t - g(Po), 
where Ai is effective of degree g. 

16. The method as recited in Claim 13, wherein if P=(x, y) is a point on 
said hyperelliptic curve C, then — P denotes a point -P:=(*, -y), and wherein if a 
point P=(x, y) occurs in A and y * 0, then -P := (x,-y) does not occur in A and a 
representative for identity will be g(Po). 

17. The method as recited in Claim 16, further comprising: 

to a representative ^4/, associating two polynomials (a z , 6,) which represent a 
divisor. 
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1 8. The method as recited in Claim 1 6, further comprising: 
determining D as an ra-torsion element of J(C). 

19. The method as recited in Claim 18, further comprising: 

if j is an integer, then h jD = h jD (X) denoting a rational function on C with 
divisor (h JJ} ) =jA x -Aj - ((/-l) g) (P 0 ). 

20. The method as recited in Claim 18, wherein D is an /w-torsion 
divisor and A m = g(Po), and a divisor of h m D is = m>4i - mg(P 0 ). 

21 The method as recited in Claim 18, wherein h mD is well-defined up 
to a multiplicative constant. 

22. The method as recited in Claim 1 8, further comprising: 
evaluating h mD at a degree zero divisor E on said hyperelliptic curve C, 

wherein E does not contain P 0 and E is prime to A t . 

23. The method as recited in Claim 18, wherein E is prime to A t for all i 
in an addition-subtraction chain for aw. 

24. The method as recited in Claim 22, wherein given A h A jy and A i+J , 
further comprising determining a function such that a divisor of Uq is (iiy) = ^4, 
+ Aj-Ahj -g(P 0 ). 
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25. The method as recited in Claim 22, further comprising: 
evaluating h jD {E) such that when y=l, h\ D is 1. 

26. The method as recited in Claim 22, further comprising: 

given A h A j9 h^E) and hjo(E), evaluating u g j to be (Uij)=Ai + Aj - A t +j - 
g(P 0 ),, and /^(£)= hjjffl u u (E). 

27. The method as recited in Claim 13, further comprising: 
determining a function (uij) = A ( + Aj - A i+j - g(Po). 

28. The method as recited in Claim 27, wherein g = 2 and 
(Ujj) = Ai + Aj - A i+ j - 2(P 0 ) is determined as follows 

u u ( x ) := Z ^/ W lr X ^ ( ^ X) l y ^ ' if the of a ™ is 

greater than 2, otherwise, w y is determined as u itj (X) := d(x(X)), wherein 
is the greatest common divisor of three polynomials (a t {x), a/x), bi(x)+bj{x)). 

29. The method as recited in Claim 13, further comprising: 
determining a Squared Tate pairing for a hyperelliptic curves v m for an m- 

torsion element D of a Jacobian J(C) and an element E of /(C), with 
representatives (P 1 )+(P 2 )+...+(P g ) - g(P 0 ) and (Q,)+(Q 2 )+...+(Q g ) - g(P 0 ), 
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respectively, with each P, and each Q y on the curve C, with P, not equal to ±Q y 
for all determining that 

v m (A£):= (\,,i,((fli)-M)+(^)-(-^)+...+(O f )-(-O t ))^. 

30. A computer-readable medium having computer-implementable 
instructions for causing at least one processing unit to perform acts comprising: 

determining a hyperelliptic curve C of genus g over a field K and a positive 
integer w; 

determining a Jacobian /(C) of said hyperelliptic curve C, and wherein each 
element D of 7(Q contains a representative of the form A- g(Po), where >4 is an 
effective divisor of degree g; and 

determining a plurality of functions h j D that are iterative building blocks for 
the formation of a function h m D in order to evaluate v m which is a Squared Tate 
pairing. 

31. The computer-readable medium as recited in Claim 30, wherein said 
hyperelliptic curve C is not of characteristic 2. 

32. The computer-readable medium as recited in Claim 30, wherein 

for at least one element D of J(Q, a representative for iD will be A t - g(Po) 5 
where A t is effective of degree g. 

33. The computer-readable medium as recited in Claim 30, wherein if 
P=(x 9 y) is a point on said hyperelliptic curve C, then — P denotes a point -P:=(jt, 
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-y), and wherein if a point P=(x, y) occurs in A and y * 0, then -P := (x,-^) does 
not occur in A and a representative for identity will be g(Po). 

34. The computer-readable medium as recited in Claim 33, further 
comprising: 

to a representative A h associating two polynomials (a h bj) which represent a 
divisor. 

35. The computer-readable medium as recited in Claim 33 , further 
comprising: 

determining D as an ra-torsion element of J(C). 

36. The computer-readable medium as recited in Claim 35, further 
comprising: 

if j is an integer, then h JtD = h jD (X) denoting a rational function on C with 
divisor =jA x -Aj r- ((/-l)g) (P 0 ). 

37. The computer-readable medium as recited in Claim 35, wherein D is 
an w-torsion divisor and A m = g(Po), and a divisor of h m D is = mA\ - mg(P 0 ). 

38 The computer-readable medium as recited in Claim 35, wherein h m D 
is well-defined up to a multiplicative constant. 
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39. The computer-readable medium as recited in Claim 35, further 
comprising: 

evaluating h m D at a degree zero divisor E on said hyperelliptic curve C, 
wherein E does not contain P 0 and E is prime to A h 

40. The computer-readable medium as recited in Claim 35, wherein E is 
prime to A t for all i in an addition-subtraction chain for m. 

41. The computer-readable medium as recited in Claim 39, wherein 
given A h Aj, and A i+j , further comprising determining a function uq such that a 
divisor of Uy is (tijj) = A t + Aj - A i+J - g(Po). 

42. The computer-readable medium as recited in Claim 39, further 
comprising: 

evaluating h jD (E) such that when j=l 9 h\ D is 1. 

43. The computer-readable medium as recited in Claim 39, further 
comprising: 

given A h Aj, h iD (E) and h jD {E), evaluating u itj to be (w zy )=^/ + Aj - A i+j - 
g(P 0 ),, and h i+JD (E)= h iD (E) h jtD (E) u itj (£). 

44. The computer-readable medium as recited in Claim 30, further 
comprising: 

determining a function (w, 7 ) = A t + Aj - A i+J - g(Po)- 
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45. The computer-readable medium as recited in Claim 44, wherein g = 
2 and 



(u itJ ) = At + Aj - A i+J - 2(P 0 ) is determined as follows 

M <v W := Z > if *e degree of a mw is 

greater than 2, otherwise, is determined as (X) := d(x(X)), wherein 
d(x) is the greatest common divisor of three polynomials (a t {x), afa), bi(x)+bj{x)). 



46. The computer-readable medium as recited in Claim 30, further 
comprising: 

determining a Squared Tate pairing for a hyperelliptic curves v mj for an m- 
torsion element D of a Jacobian J(C) and an element £ of J(C), with 
representatives (P 1 )+(P 2 )+...+(P g ) - g(P 0 ) and (Q0+(Q 2 )+...+(Q g ) - g(P 0 ), 
respectively, with each P, and each Qj on the curve C, with P; not equal to ±Q y 
for all ij\ determining that 

v m (D,E):= (/ JmD ((Q l )-(.Q 1 ) + (Q 2 )-(-Q 2 ) + ... + (Qj-(.Qj)^. 
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47. An apparatus comprising: 

memory configured to store information suitable for use with using a 
cryptographic process; and 

logic operatively coupled to said memory and configured to determine a 
hyperelliptic curve C of genus g over a field K and a positive integer m, determine 
a Jacobian J{C) of said hyperelliptic curve C, wherein each element D of J{C) 
contains a representative of the form A- g(Po) and A is an effective divisor of 
degree g, and determine a plurality of functions h jD that are iterative building 
blocks for the formation of a function h mD in order to evaluate v m which is a 
Squared Tate pairing. 

48. The apparatus as recited in Claim 47, wherein said hyperelliptic 
curve C is not of characteristic 2. 

49. The apparatus as recited in Claim 47, wherein 

for at least one element D of J{C), a representative for iD will be A t - g(Po), 
where A t is effective of degree g. 

50. The apparatus as recited in Claim 47, wherein if P=(x, y) is a point 
on said hyperelliptic curve C, then nP denotes a point -P:=(x, -y), and wherein if 
a point P=(x 9 y) occurs in A and y * 0, then — P := does not occur in A and a 
representative for identity will be g(Po). 
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51. The apparatus as recited in Claim 50, wherein said logic is further 
configured to, for a representative A h associate two polynomials (a h Z> z ) which 
represent a divisor. 

52. The apparatus as recited in Claim 50, wherein said logic is further 
configured to determine D as an w-torsion element of J(Q. 

53. The apparatus as recited in Claim 52, wherein said logic is further 
configured to, if j is an integer, then determine h j D = h j D {X) by denoting a rational 
function on C with divisor (h jD ) =jA\-Aj- ((J- 1) g) (Po). 

54. The computer-readable medium as recited in Claim 52, wherein D is 
an /w-torsion divisor and A m = g(Po), and a divisor of h mD is (h mD ) = mA\ - mg(P 0 ). 

55 The apparatus as recited in Claim 52, , wherein h mD is well-defined 
up to a multiplicative constant. 

56. The apparatus as recited in Claim 52, wherein said logic is further 
configured to evaluate h m D at a degree zero divisor E on said hyperelliptic curve 
C, wherein E does not contain P 0 and E is prime to A h 

57. The apparatus as recited in Claim 52, wherein E is prime to A t for all 
i in an addition-subtraction chain for m. 
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58. The apparatus as recited in Claim 56, wherein given A h A j9 and A g +j 9 
and wherein said logic is further configured to determine a function u t j such that a 
divisor of u u is = A t + Aj - A i+j - g(P 0 )- 

59. The apparatus as recited in Claim 56, wherein said logic is further 
configured to evaluate h jD (E) such that when j=l 9 h X D is 1. 

60. The apparatus as recited in Claim 56, wherein said logic is further 
configured to, given A h A j9 h it o{E) and h jD (E) 9 evaluate u itj to be (u;j)=Ai+ Aj - A t +j 
- g(Poh and h i+JrD (E)= h UD (E) h JtD (E) u u (E). 

61. The apparatus as recited in Claim 47, wherein said logic is further 
configured to determine a function (uij) = A t + Aj - A i+J - g(Po). 



62. The apparatus as recited in Claim 61, wherein g = 2 and 
(ujj) = A t + Aj - Ai+j - 2(P 0 ) is determined by said logic as follows 

greater than 2, otherwise, uq is determined as (X) := d(x(X)), wherein d(x) is 
the greatest common divisor of three polynomials (afc), a 7 (x), bfa)+bj{x)). 
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63. The apparatus as recited in Claim 47, wherein said logic is further 
configured to determine a Squared Tate pairing for a hyperelliptic curves <v m , for an 
m-torsion element D of a Jacobian J{C) and an element E of J(C), with 
representatives (P0+(P 2 )+...+(P g ) - g(P 0 ) and (Q 1 HQ 2 )+...+(Q g ) - g(P 0 ), 
respectively, with each P, and each Q 7 on the curve C, with P/ not equal to ±Q 7 
for all i,/, and to determine that 

v m (D,E):= (A ffliD ((Q 1 )-(.Q I ) + (Q 2 )-(-P 2 ) + - + (Pj-(-O g ))^. 
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